CVE-2010-5004

Description

SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka Advanced Poll) Script allows remote attackers to execute arbitrary SQL commands via the category parameter.

Affected products

• 2daybiz / polls_script

References

• MISChttp://www.securityfocus.com/bid/41172
• EXPLOIThttp://www.exploit-db.com/exploits/14074